ShyftWize Africa — PAIA Manual

Manual in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 ("PAIA"), read with the Protection of Personal Information Act 4 of 2013 ("POPIA").

Effective date: 1 July 2026 Version: 1.0

1. Introduction

This manual is published in accordance with section 51 of PAIA. It is intended to help members of the public understand the categories of records held by ShyftWize Africa (Pty) Ltd and how to request access to them, and to describe how requests for access to, and correction of, personal information are handled under POPIA.

2. Particulars of the private body

• Name: ShyftWize Africa (Pty) Ltd
• Company registration number: K2024599650
• Registered / physical address: 14 Engelbrecht Street, Glen Marais, Kempton Park, Gauteng, 1619, South Africa
• Postal address: As above (14 Engelbrecht Street, Glen Marais, Kempton Park, Gauteng, 1619, South Africa)
• Telephone: +27 76 054 5020
• Website: https://shyftwize.app

Information Officer: Jarod Graham (head of the business)

• Email: support@shyftwize.com
• Telephone: +27 76 054 5020

All requests under PAIA and POPIA should be addressed to the Information Officer at the details above.

3. The Information Regulator and the PAIA Guide

The Information Regulator has compiled a guide, in terms of section 10 of PAIA, on how to use the Act. The guide is available from the Information Regulator:

Information Regulator (South Africa)

• Website: https://inforegulator.org.za

4. Categories of records held by ShyftWize

4.1 Records held by ShyftWize (as a private body)

Records are held in the following broad categories (this list is descriptive and not exhaustive):

• Company and governance records — registration and statutory records.
• Financial and tax records — invoices, subscription and payment records, and accounting records.
• Customer records — customer account details, contracts, and correspondence.
• Employee / human-resources records — records of our own staff (if any), including contracts and payroll records.
• Operational and IT records — system, security, and audit-log records.
• Marketing and website records — enquiries and communications.

4.2 Records held by ShyftWize on behalf of its customers (as operator)

As an operator under POPIA, ShyftWize hosts workforce-management data that its customers enter about their own personnel (for example attendance, clock-in photographs, GPS location, leave, and pay-rate data). The relevant customer is the responsible party for those records. Requests for access to that information should be directed to the customer organisation concerned; ShyftWize will assist that customer as its operator where lawful to do so.

4.3 Records held in terms of other legislation

Certain records are kept in accordance with other laws, which may include, among others:

• Companies Act 71 of 2008
• Income Tax Act 58 of 1962 and the Tax Administration Act 28 of 2011
• Basic Conditions of Employment Act 75 of 1997
• Labour Relations Act 66 of 1995
• Unemployment Insurance Act 63 of 2001
• Compensation for Occupational Injuries and Diseases Act 130 of 1993
• Protection of Personal Information Act 4 of 2013
• Electronic Communications and Transactions Act 25 of 2002

Access to records under those laws is dealt with in terms of the relevant legislation.

5. How to request access to a record

5.1 A requester must complete the prescribed PAIA request form and submit it to the Information Officer at the contact details in clause 2. The current prescribed forms are available from the Information Regulator (see clause 3).

5.2 The request must:

• provide sufficient particulars to enable the Information Officer to identify the record and the requester;
• identify the right the requester seeks to exercise, and explain why the requested record is required for that purpose (where applicable);
• state the form of access required; and
• provide an address and contact details for the reply.

5.3 If a request is made on behalf of another person, proof of the requester's authority to act must be submitted.

6. Fees

PAIA provides for a request fee and, where applicable, an access fee, as prescribed in the regulations made under PAIA. The Information Officer will advise the requester of any fees payable before processing the request. Current prescribed fees are available from the Information Regulator.

7. Grounds for refusal

Access to a record may be refused on the grounds set out in Chapter 4 of Part 3 of PAIA, which include (among others) the mandatory protection of the privacy of a third party, the commercial information of a third party or of ShyftWize, and records privileged from production in legal proceedings. Where part of a record may be withheld, access will be given to the remainder where reasonably severable.

8. Remedies

If a request is refused, or the requester is dissatisfied with the way a request was handled, the requester may:

• lodge an internal query with the Information Officer at support@shyftwize.com;
• lodge a complaint with the Information Regulator; and/or
• apply to a court as provided for in PAIA.

9. Requests relating to personal information (POPIA)

A data subject may, under POPIA:

• request confirmation of, and access to, the personal information ShyftWize holds about them;
• request that their personal information be corrected, updated, or deleted where appropriate; and
• object to the processing of their personal information in certain circumstances.

Such requests should be sent to the Information Officer at support@shyftwize.com using the prescribed POPIA forms where applicable. A complaint may also be lodged with the Information Regulator.

10. Availability of this manual

This manual is available:

• on our website at https://shyftwize.app/legal/paia;
• from the Information Officer on request; and
• as required, at the office of the Information Regulator.

11. Updates

This manual will be updated as necessary. The "Effective date" above indicates when it was last revised.

ShyftWize Africa (Pty) Ltd — PAIA Manual, Version 1.0, effective 1 July 2026.